Cybersecurity without the jargon

Understand the words. Know what to do.

Plain-language definitions with a practical action for each term. Search by the word you saw or the problem you are trying to understand.

Beginner reference · Prototype review required

Definitions are intentionally practical and simplified. They do not replace technical, legal, incident-response, or regulatory advice.

This filter works only on this page. Nothing you type is sent or saved.
16 terms shown
RecoveryBackup
Also: Recovery copy
A separate copy of important information that can be restored after loss, damage, deletion, or some attacks.
What this means for youKeep the copy protected and separate, then test that you can restore it.
DataData breach
Also: Information exposure
An incident where personal, confidential, or protected information is accessed, lost, changed, or disclosed without authorisation.
What this means for youContain the exposure, preserve evidence, assess who may be affected, and get qualified support where needed.
DataEncryption
Also: Encrypted
A way of transforming information so it cannot be read normally without the correct key or authorised access.
What this means for youUse supported devices and services that protect stored and transmitted information, while still securing the account and recovery process.
DevicesMalware
Also: Malicious software, Virus
Software designed to steal, damage, spy, disrupt, or gain unauthorised access to a device or information.
What this means for youKeep supported software updated, remove untrusted apps, and seek qualified help if a device behaves suspiciously.
AccountsMFA
Also: Multi-factor authentication, 2FA, Two-step verification
A sign-in process that asks for more than a password, such as a security key, authenticator approval, passkey, or code.
What this means for youProtect important accounts with the strongest suitable method the service supports, and never share a sign-in code.
AccountsOTP
Also: One-time password, Verification code
A short-lived code used to confirm a sign-in, payment, recovery, or other sensitive action.
What this means for youTreat it like a key. Enter it only when you started the action through the official service, and never send it to another person.
AccountsPasskey
Also: Passwordless sign-in
A sign-in method tied to your device or password manager that uses cryptography instead of a reusable password.
What this means for youUnderstand how the passkey is backed up or recovered before relying on it for an important account.
AccountsPassword manager
Also: Password vault
A tool that generates and stores unique passwords so you do not need to reuse or remember every password.
What this means for youChoose a reputable product and protect it with a unique master password and a clear recovery plan.
ScamsPhishing
Also: Fake message, Credential theft
A deceptive message or page designed to make someone reveal information, send money, install software, or grant access.
What this means for youPause and verify through a separate official channel instead of using the message's links or contact details.
DevicesRansomware
Also: File-encrypting attack
Malware that blocks access to systems or information and demands payment, sometimes after stealing data as well.
What this means for youDisconnect affected systems when safe, preserve evidence, activate the incident plan, and involve qualified response support.
RecoveryRecovery code
Also: Backup code
A special code that can restore access when the normal sign-in or verification method is unavailable.
What this means for youStore recovery codes privately, separately from the account, and never share them with someone offering help.
AccountsSIM swap
Also: SIM takeover
When a criminal transfers a victim's mobile number to another SIM or service in order to receive calls and messages.
What this means for youContact the mobile network quickly if service disappears unexpectedly, then protect email, financial, and other affected accounts.
ScamsSocial engineering
Also: Human manipulation
Using trust, fear, urgency, authority, or curiosity to manipulate someone into taking an unsafe action.
What this means for youSlow down, question unusual pressure, and verify the request independently.
ScamsSpoofing
Also: Impersonation
Making a sender name, caller ID, email address, website, or other identity appear to come from a trusted source.
What this means for youDo not rely on appearance alone; contact the person or organisation through details you already trust.
DevicesUpdate
Also: Security patch
A software change that can fix known security weaknesses, reliability problems, or other defects.
What this means for youEnable automatic updates for supported operating systems and trusted apps.
DataVPN
Also: Virtual private network
A service that creates an encrypted connection between a device and a VPN provider; it does not make every website, account, or action trustworthy.
What this means for youUse a reputable provider when a VPN fits the need, but still verify sites, protect accounts, and avoid suspicious downloads.